Vendors / Advance B2b Script Project Advance B2b Script Project Records 5 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 1
CVSS high 1
Exploited now Advance B2b Script Project records in CISA KEV No Advance B2b Script Project vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority MEDIUM 48
Advance B2B Script 2.1.3 has SQL Injection via the tradeshow-list-detail.php show_id or view-product.php pid parameter.
CVSS 3.0 CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.0305 · Published 2017-12-13 · No fix listed CWE-89
Priority LOW 39
PHP Scripts Mall Advance B2B Script 2.1.4 has Cross-Site Request Forgery (CSRF) via the Edit Profile feature.
CVSS 3.0 HIGH 8.8· Network · No auth · User interaction · EPSS 0.0065 · Published 2019-03-20 · No fix listed CWE-352
Priority LOW 32
PHP Scripts Mall Advance B2B Script 2.1.4 allows remote attackers to cause a denial of service (changed Page structure) via JavaScript code in the First Name field.
CVSS 3.0 MEDIUM 6.5· Network · Low privileges · No interaction · EPSS 0.01581 · Published 2019-03-20 · No fix listed CWE-119
Priority LOW 25
PHP Scripts Mall Advance B2B Script 2.1.4 has stored Cross-Site Scripting (XSS) via the FIRST NAME or LAST NAME field.
CVSS 3.0 MEDIUM 5.4· Network · Low privileges · User interaction · EPSS 0.00653 · Published 2019-03-20 · No fix listed CWE-79
Priority LOW 23
PHP Scripts Mall Advance B2B Script 2.1.4 has directory traversal via a direct request for a listing of an image directory such as an assets/ directory.
CVSS 3.0 MEDIUM 4.3· Network · Low privileges · No interaction · EPSS 0.01321 · Published 2019-03-20 · No fix listed CWE-22
Open these records in search → All records by CVSS severity
1 1 3 0 0
THREATIST.IORead the docs